| Support |
| Site Admin |
|
| |
| Joined: 12 Mar 2004 |
| Posts: 370 |
| Location: Omaha, NE |
|
|
|
 |
|
 |
|
Yes. If you use the Field Encryption Registry and choose to store the encrypted field values in an external file, then a Key Identifier is stored with each record in the external file. If a key is changed for a field, then a new key identifier will be stored with any records that are inserted or updated in the external file. A mass re-encryption of the field values will not be needed.
When retrieving an encrypted value from the external file, Crypto Complete will use the external file record?s key identifier to retrieve the right Key Label for decrypting the value. This technique allows you to change the key for a field in the Registry at any time, even when users are active in the application. Up to 99,999 keys can be rotated for a field. |
|
